
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json)
Hash identifier: f89uBp0c3Au/0Lg1NKtZfWi6KywPvfaLAts/Eq2wK/s=
Subject key identifier: 5C:EB:C5:2B:68:05:C0:EC:C0:5E:7D:8D:2A:56:3D:FD:3B:EC:D9:1F
Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Certificate serial: 02C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
Manifest number: 02AB
Signing time: Mon 21 Sep 2026 01:35:30 +0000
Manifest this update: Mon 21 Sep 2026 01:35:29 +0000
Manifest next update: Mon 28 Sep 2026 01:35:29 +0000
Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: ht5NI4k798wNAZgfALq5MX0cDIXeHWONqe7g5Knw5Q4=)
2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: b4J/mYBm2hWS1nmxPAt6Hfta5HnSTHjYDCufGmuVc3o=)
3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: iYPsjiDlnP7T4RRO1PS1UwzoVnwYvaILMXvi6/quXcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Validity
Not Before: Sep 21 01:35:29 2026 GMT
Not After : Sep 28 01:35:29 2026 GMT
Subject: CN=6ab089e2-9fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:78:01:f6:df:42:df:bf:4c:22:72:c1:25:
b7:66:c1:79:4f:1c:13:65:e1:a6:79:df:24:f0:bd:
bd:1a:ec:85:21:78:f7:97:a2:35:c7:f1:c3:ff:52:
0c:be:ed:bc:93:b2:30:36:25:ef:1d:8c:61:4b:82:
36:54:b3:2d:37:92:3a:a0:a3:c3:a2:9d:c4:c7:65:
0a:7f:09:f5:8a:57:69:81:6c:39:1c:9a:46:09:fe:
94:d5:3b:f4:d8:27:a6:51:06:90:54:e3:19:fa:76:
2d:cd:3a:40:b3:12:80:64:36:d1:14:33:f9:6d:0f:
05:5d:47:cc:16:52:0c:0c:5e:40:07:93:09:5c:a0:
d0:15:08:f1:16:6d:54:50:2c:f8:59:c0:38:02:b4:
d7:f9:5b:45:94:0f:f8:35:5d:1f:38:23:e2:e1:99:
4b:db:01:2f:92:99:ad:c1:bb:6f:9b:19:f9:51:89:
64:24:92:da:b7:0b:2d:63:89:24:b9:72:c7:9b:a9:
9d:3a:4f:02:ce:b5:f5:b7:0e:67:70:35:58:f2:8a:
22:b7:d3:19:66:d4:ab:fc:97:d0:fe:9a:4c:3b:4f:
12:46:22:a8:e5:ca:10:e7:fa:62:1d:d8:60:7d:f3:
dc:88:0d:d7:3c:3a:b1:2e:8a:94:54:67:68:b8:a7:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:C5:2B:68:05:C0:EC:C0:5E:7D:8D:2A:56:3D:FD:3B:EC:D9:1F
X509v3 Authority Key Identifier:
keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:67:60:7d:f2:5a:f5:84:ef:fa:19:d3:03:ab:0a:f6:30:ab:
a8:da:c3:f6:7a:6b:63:c1:bf:b6:e5:56:d4:87:73:f7:0a:42:
81:6d:a2:f9:9a:25:af:16:12:a5:f1:ef:72:c3:9f:b0:fd:aa:
e8:74:ce:83:57:b6:d4:ea:9c:3d:ee:1a:41:d8:d4:ae:43:6d:
8f:6f:55:18:b2:86:74:1f:63:a7:40:1b:67:4b:da:51:70:ec:
d7:33:c5:48:62:49:7c:a5:c8:86:0e:43:9b:e3:2e:e6:1d:a6:
7e:9f:f7:a3:3b:a4:1b:0f:71:0f:c7:3d:cb:3b:00:1a:ba:09:
ec:40:39:b1:98:18:44:c9:cf:1d:9f:53:b5:f2:d8:15:7c:47:
76:ae:da:8f:fd:eb:6c:55:a2:58:3a:25:75:76:36:79:ea:9c:
7d:e1:75:1b:a8:c8:94:c4:54:ee:cf:93:46:df:32:38:05:78:
f4:7a:1b:4c:cf:89:52:a9:a9:e0:86:84:36:6e:7e:fb:61:5c:
f9:e2:8b:bf:00:13:c0:c6:db:60:32:36:18:af:56:39:cd:40:
82:37:3b:f5:d9:94:fa:3c:db:2f:12:a1:01:fe:7c:5e:77:94:
4a:4d:28:46:76:de:6f:f2:ff:38:76:a5:88:f9:75:4f:7d:18:
87:5f:7c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:15:30 2026 by rpki-client